ESA Product Support | ESA Guided Setup | SMA Product Support | Encryption Product Support Email Submission and Tracking Portal | Cisco Talos Reputation Center Support | CRES | Talos
Cisco: Open a Support Case | Support & Downloads | Worldwide Contacts | Bug Search | Notification Service |
ESA: | 13.5.3-010 |
SMA: | 13.8.1-052 | |
Email Plug-in (Reporting): | 1.1.0.136 | |
Email Plug-in (Encryption): | 1.2.1.167 |
In our paid penetration test our vendor recommended the following:
Create a filter that will inspect the message body of an email and compare a link's text to the URL in the link's HTML tag. If there is a difference, prepend a message to the message body warning the user to be cautious and include the real URL.
Additionally a filter can be created if an HTML formatted email does not have the RFC standard, alternate plain-text version of the message body.
Is this possible today with Cisco IronPort? We have a call with proofpoint next Wednesday to intro their email security solution so if Cisco wants us to stay next year they better step up to the plate here.
We currently do not compare a URL with its text, however we utilize both for URL reputation and category lookups.
If there are specific scenarios or feedbacks you can open a TAC case or discuss with your Accounts team on upcoming roadmaps.
Regards,
Libin